Lucene search
+L

10328 matches found

Openbugbounty
Openbugbounty
added 2023/10/05 4:03 p.m.11 views

global-business-school.org Cross Site Scripting vulnerability OBB-3722512

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
NVD
NVD
added 2023/10/04 2:15 p.m.51 views

CVE-2023-27433

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery.This issue affects Make Paths Relative: from n/a through 1.3.0...

8.8CVSS6.5AI score0.00246EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/04 2:15 p.m.12 views

CVE-2023-27433

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery.This issue affects Make Paths Relative: from n/a through 1.3.0...

8.8CVSS7.3AI score0.00246EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/04 2:15 p.m.29 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Make Paths Relative plugin = 1.3.0 versions...

6.8CVSS8.8AI score0.00246EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/04 1:51 p.m.19 views

CVE-2023-27433 WordPress Make Paths Relative Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in YAS Global Team Make Paths Relative allows Cross Site Request Forgery.This issue affects Make Paths Relative: from n/a through 1.3.0...

5.4CVSS6.9AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
added 2023/10/04 1:51 p.m.73 views

CVE-2023-27433

CVE-2023-27433 – WordPress Make Paths Relative CSRF vulnerability Affected: WordPress plugin Make Paths Relative (versions up to and including 1.3.0).Root cause: Cross-Site Request Forgery due to insufficient CSRF protection in the plugin’s admin code path (admin/class-make-paths-relative-admin.p...

8.8CVSS6.9AI score0.00246EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.12 views

The vulnerability of MediaTek’s microprogramming software components in the GPS module allows hackers to enhance their privileges.

The vulnerability of the GPS component of MediaTek’s microprogramming software chips is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS6.6AI score0.00095EPSS
SaveExploits0References2
OSV
OSV
added 2023/10/02 1:02 p.m.14 views

OSV-2023-948 Global-buffer-overflow in isvce_write_coeff4x4_cavlc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62896 Crash type: Global-buffer-overflow READ 1 Crash state: isvcewritecoeff4x4cavlc isvceencoderesidue isvcewritepslicembcavlc...

7.2AI score
SaveExploits0References1
OSV
OSV
added 2023/10/01 1:15 a.m.9 views

AZL-36971 CVE-2023-43907 affecting package optipng for versions less than 0.7.8-5

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c...

7.8CVSS7.2AI score0.00518EPSS
SaveExploits1References1
OSV
OSV
added 2023/10/01 1:15 a.m.20 views

CVE-2023-43907

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c...

7.8CVSS6.9AI score
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/10/01 1:15 a.m.32 views

CVE-2023-43907

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c...

7.8CVSS7.1AI score0.00518EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/01 12:00 a.m.8 views

OptiPNG Security Vulnerability

OptiPNG is a PNG optimizer from OptiPNG that recompresses image files to a smaller size without losing any information. A security vulnerability exists in OptiPNG version v0.7.7, which stems from a global buffer overflow via the buffer variable in gifread.c. The vulnerability is caused by the...

7.8CVSS7.4AI score0.00518EPSS
SaveExploits1References5
AlpineLinux
AlpineLinux
added 2023/10/01 12:00 a.m.24 views

CVE-2023-43907

OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c...

7.8CVSS7.8AI score0.00518EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2023/09/28 3:15 p.m.5 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS6.3AI score0.00486EPSS
SaveExploits1References2
NVD
NVD
added 2023/09/28 3:15 p.m.21 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.8CVSS5.1AI score0.00486EPSS
SaveExploits1References1
Prion
Prion
added 2023/09/28 3:15 p.m.36 views

Cross site scripting

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

4.3CVSS5.2AI score0.00486EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/09/28 12:00 a.m.127 views

CVE-2023-43879

Summary: CVE-2023-43879 affects RiteCMS 3.0 with a Cross-Site Scripting (XSS) flaw that allows an attacker to run arbitrary code via a crafted payload in the Global Content Blocks within the Administration Menu. The vulnerability is consistently described across multiple connected sources. What’s...

4.8CVSS5.1AI score0.00486EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/09/28 12:00 a.m.12 views

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in Global Content Blocks in the Administration Menu via a specially crafted payload...

4.8CVSS6.8AI score0.00486EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/28 12:00 a.m.35 views

CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu...

5.4AI score0.00486EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/09/28 12:00 a.m.15 views

PT-2023-29024 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: Rite CMS version 3.0 Description: The issue allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu. This is a Cross-Site scripting XSS issue. Recommendations: For Rite CMS...

4.8CVSS6.8AI score0.00486EPSS
SaveExploits1References8
Rows per page
Query Builder